← All credits
WPScan
3954 vulnerability records and advisories credit this contributor.
CVE-2026-77008
HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings Update
CVE-2026-77010
HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass
CVE-2026-77012
Icollect <= 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write via Default Publishing Password
CVE-2026-77704
Amelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval
CVE-2026-77786
Rank Math SEO < 1.0.277 - Editor+ Core Settings Modification via fix-site-seo Ability
CVE-2026-80311
Stripe Payment Forms by WP Full Pay < 8.5.5 - Cross-Customer Subscription Cancellation via IDOR
CVE-2026-80488
WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import Fields
CVE-2026-81026
MasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPN
CVE-2026-81200
MasterStudy LMS < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOR
CVE-2026-81342
MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect